Merge pull request #1852 from slingamn/fail_authenticate

add FAIL AUTHENTICATE VERIFICATION_REQUIRED

irc/handlers.go

 	password := string(splitValue[2])
 	err := server.accounts.AuthenticateByPassphrase(client, authcid, password)
 	if err != nil {
-		msg := authErrorToMessage(server, err)
-		rb.Add(nil, server.name, ERR_SASLFAIL, client.Nick(), fmt.Sprintf("%s: %s", client.t("SASL authentication failed"), client.t(msg)))
+		sendAuthErrorResponse(client, rb, err)
 		return false
 	} else if !fixupNickEqualsAccount(client, rb, server.Config(), "") {
 		return false
 	return false
 }
 
+func sendAuthErrorResponse(client *Client, rb *ResponseBuffer, err error) {
+	msg := authErrorToMessage(client.server, err)
+	rb.Add(nil, client.server.name, ERR_SASLFAIL, client.nick, fmt.Sprintf("%s: %s", client.t("SASL authentication failed"), client.t(msg)))
+	if err == errAccountUnverified {
+		rb.Add(nil, client.server.name, "FAIL", "AUTHENTICATE", "VERIFICATION_REQUIRED", "*", client.t(err.Error()))
+	}
+}
+
 func authErrorToMessage(server *Server, err error) (msg string) {
 	if throttled, ok := err.(*ThrottleError); ok {
 		return throttled.Error()
 	}
 
 	if err != nil {
-		msg := authErrorToMessage(server, err)
-		rb.Add(nil, server.name, ERR_SASLFAIL, client.nick, fmt.Sprintf("%s: %s", client.t("SASL authentication failed"), client.t(msg)))
+		sendAuthErrorResponse(client, rb, err)
 		return false
 	} else if !fixupNickEqualsAccount(client, rb, server.Config(), "") {
 		return false